Legal notice

The Shipyard Portal (this site) is an internal staff tool operated by Via Maris Shipyard for its own employees. It is not a public service and isn't intended for use by anyone outside the company. Access is restricted to staff who hold a valid account.

Content on this site — department numbers, forms, tenders, vessel and project information — is for internal operational use and is not an offer, solicitation, or public disclosure of any kind.

Operator

Via Maris Shipyard
[registered company name and registration number to be added]
South Africa

Privacy policy

This describes what personal information the Shipyard Portal collects from staff, why, and what your rights are under South Africa's Protection of Personal Information Act (POPIA).

What we collect

• Account details: your name, email address, department, and a password. Your password is never stored in readable form — it's hashed by our authentication provider, Supabase, and nobody at Via Maris (including administrators) can see it.
• What you submit through the portal's forms: Job Safety Analyses, scaffolding and training records, RFQs, vehicle bookings, and Company Info entries (tenders, vessels, projects). These can include names of colleagues you list as crew, supervisors, or contacts.

What we deliberately don't collect

Leave Applications and Anonymous Complaints submitted through this portal are not saved anywhere — not in the database, not on your device. They're personal and sensitive enough that we chose not to store them here at all until a proper private HR workflow exists for them.

Why we process it

To authenticate staff and control access to the portal by department and role, and to operate the HSE, Procurement and Company Info record-keeping described above as part of normal shipyard operations.

Who can see it

Any signed-in Via Maris staff member can see other staff members' names, departments, and the HSE/Procurement/Company Info records they've submitted — that's by design, so colleagues can see each other's safety and operational records. Account role changes (Staff / Department Admin / Admin) are restricted to Admins.

Where it's stored

Data is stored with Supabase, a third-party database and authentication provider, protected by database-level access rules and an encrypted (HTTPS) connection. [Supabase project region to be confirmed and added here — this matters for cross-border transfer disclosure under POPIA.]

How long we keep it

[Retention period to be defined by Via Maris — for example, how long JSA or RFQ records are kept after a project closes, and what happens to an account when someone leaves the company.]

Your rights

Under POPIA, you can ask to see the personal information we hold about you, ask us to correct or delete it, and object to how it's used, subject to the usual legal limits (for example, safety records tied to an active project). To do so, contact [Via Maris Information Officer name/email to be added].

If you're not satisfied with how a request is handled, you can complain to South Africa's Information Regulator: enquiries@inforegulator.org.za, or via their complaints portal.